Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

gVisor Runtime for Challenge Pods #78

Open
Tracked by #83
MNThomson opened this issue Oct 17, 2022 · 1 comment
Open
Tracked by #83

gVisor Runtime for Challenge Pods #78

MNThomson opened this issue Oct 17, 2022 · 1 comment
Labels
enhancement New feature or request k8s Kubernetes related changes security Relating to the security of the application or this repo

Comments

@MNThomson
Copy link
Member

MNThomson commented Oct 17, 2022 •
edited

Is your feature request related to a problem? Please describe.

I'd rather not have participants with root access to a container get an RCE on the host node

Describe the solution you'd like

Implement the gVisor runtime for challenge deployments
@MNThomson MNThomson added enhancement New feature or request k8s Kubernetes related changes security Relating to the security of the application or this repo labels Oct 17, 2022
@MNThomson MNThomson mentioned this issue Oct 26, 2022
Open
5 tasks
@MNThomson
Copy link
Member Author

Extremely helpful tutorial: https://www.xelon.ch/en/knowledge-base/install-gvisor-on-kubernetes-cluster

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request k8s Kubernetes related changes security Relating to the security of the application or this repo
Projects
Infra Roadmap
Status: Backlog
Milestone
No milestone
Development

No branches or pull requests
1 participant
@MNThomson